feat(helm/fluent-operator): add option to disable rbac creation (#1556)

Signed-off-by: Gregory Bloquel <[email protected]>

Author: gbloquel

charts/fluent-operator/templates/fluent-operator-clusterRole.yaml

@@ -1,4 +1,4 @@
-{{- if .Values.operator.enable }}
+{{- if and .Values.operator.enable .Values.operator.rbac.create }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

charts/fluent-operator/templates/fluent-operator-clusterRoleBinding.yaml

@@ -1,4 +1,4 @@
-{{- if .Values.operator.enable }}
+{{- if and .Values.operator.enable .Values.operator.rbac.create }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

charts/fluent-operator/values.yaml

@@ -41,6 +41,9 @@ operator:
   priorityClassName: ""
   # Pod security context for Fluent Operator. Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
   podSecurityContext: {}
+  rbac:
+    # -- Specifies whether to create the ClusterRole and ClusterRoleBinding.
+    create: true
   # Container security context for Fluent Operator container. Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
   securityContext: {}
   # Fluent Operator resources. Usually user needn't to adjust these.